Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:1533-1

Опубликовано: 12 июн. 2017
Источник: suse-cvrf

Описание

Security update for libnettle

This update for libnettle fixes the following issues:

  • CVE-2016-6489:
  • Reject invalid RSA keys with even modulo.
  • Check for invalid keys, with even p, in dsa_sign().
  • Use function mpz_powm_sec() instead of mpz_powm() (bsc#991464).

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.2
libhogweed2-2.7.1-10.3.1
libhogweed2-32bit-2.7.1-10.3.1
libnettle-2.7.1-10.3.1
libnettle-devel-2.7.1-10.3.1
libnettle-devel-32bit-2.7.1-10.3.1
libnettle4-2.7.1-10.3.1
libnettle4-32bit-2.7.1-10.3.1
nettle-2.7.1-10.3.1

Ссылки

Описание

The RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys via a cache side channel attack.

Затронутые продукты
openSUSE Leap 42.2:libhogweed2-2.7.1-10.3.1
openSUSE Leap 42.2:libhogweed2-32bit-2.7.1-10.3.1
openSUSE Leap 42.2:libnettle-2.7.1-10.3.1
openSUSE Leap 42.2:libnettle-devel-2.7.1-10.3.1
Ссылки